Security

Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.

Security Update Guide CISA KEV

CVEs · all collected releases

141 matches in Developer Tools · most urgent first CSV Text

CVE	Vulnerability	Severity	CVSS	EPSS	Impact	Status	Fixed by
CVE-2026-114155	.NET Elevation of Privilege Vulnerability.NET	Important	7.5	—	EoPLocal	Revised 11 Nov	KB5135241
CVE-2026-114157	ASP.NET Core Security Feature Bypass VulnerabilityASP.NET Core	Important	7.5	—	EoPLocal	Revised 11 Nov	KB5135241 KB5135242+1
CVE-2026-118748	ASP.NET Core Denial of Service VulnerabilityASP.NET Core	Important	7.5	—	DoSNetwork	Revised 11 Nov	—
CVE-2026-118749	ASP.NET Core Denial of Service VulnerabilityASP.NET Core	Important	7.5	—	DoSNetwork	Revised 11 Nov	—
CVE-2026-121660	Visual Studio Code Security Feature Bypass VulnerabilityVisual Studio Code	Important	7.5	—	SFBNetwork		—
CVE-2026-57099	ASP.NET Core Denial of Service VulnerabilityASP.NET Core	Important	7.5	1.2%	DoSNetwork	Revised 22 Sep	—
CVE-2026-58280	.NET Denial of Service Vulnerability.NET	Important	7.5	1.3%	DoSNetwork	Fix has a known issueRevised 15 Oct	KB5126868 KB5127660+20
CVE-2026-69651	.NET Denial of Service Vulnerability.NET	Important	7.5	1.3%	DoSNetwork	Fix has a known issueRevised 15 Oct	KB5126868 KB5127660+20
CVE-2026-69805	.NET Elevation of Privilege Vulnerability.NET	Important	7.5	0.5%	EoPNetwork		—
CVE-2026-70159	ASP.NET Core Denial of Service VulnerabilityASP.NET Core	Important	7.5	1.2%	DoSNetwork	Revised 15 Oct	—
CVE-2026-70179	ASP.NET Core Elevation of Privilege VulnerabilityASP.NET Core	Important	7.5	0.6%	EoPNetwork	Revised 15 Oct	—
CVE-2026-70181	ASP.NET Core Denial of Service VulnerabilityASP.NET Core	Important	7.5	1.2%	DoSNetwork	Revised 16 Oct	KB5130034 KB5130035+1

Advisories

MSRC guidance without a CVE of its own · 1 advisory

ADV260001

Hardening changes for ReFS volumes on removable mediaStarting with Windows updates released on and after October 13, 2026, Microsoft is making hardening changes to the Resilient File System (ReFS) . This change is not enable by default until 2027. Please see Hardening changes for ReFS volumes on removable media for more information.

Published 13 Oct28 affected products